CVE-2025-55345highCWE-61

CVE-2025-55345: high-severity vulnerability in @openai/codex

Unsafe symlink following in restricted workspace-write sandbox leads to RCE

Published

Follow this CVE+ Monitor @openai/codex

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 0.9%
In short

Codex CLI in workspace-write mode follows symbolic links without proper validation, allowing an attacker to overwrite arbitrary files on the system. If a malicious repository or directory tricks the tool into following a symlink, attackers can execute code with the privileges of the user running Codex.

Technical detail

A symlink-following vulnerability exists in Codex CLI's workspace-write sandbox where malicious symlinks within a repository or working directory are traversed without validation, bypassing directory restrictions. Pre-condition: user executes Codex CLI in workspace-write mode within attacker-controlled directory context. Impact: arbitrary file overwrite and potential RCE via code execution through modified files.

Summary generated and translated by AI from the official description.
Using Codex CLI in workspace-write mode inside a malicious context (repo, directory, etc) could lead to arbitrary file overwrite and potentially remote code execution due to symlinks being followed outside the allowed current working directory.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
@openai/codex